On Fri, Jan 18, 2013 at 7:27 AM, Steve Culver <[email protected]> wrote:
> Rob,
>
> I see from these notes that Java 7 is recommended. I've also been seeing that 
> the bad guys have been using Java for malicious purposes. Is there anything 
> specific we should know or be looking for?
>

>From what I can tell the risk is to Java in the browser, not Java on
the desktop.  So we're not aware of any vulnerabilities in OpenOffice
related to this.  But if you install Java it typically also installs
the Java browser plugin.  The recommendations I've seen say to disable
that plugin from within your browser plugin or add-in settings.   Some
browsers, like Firefox, are doing this automatically now.

-Rob


>
> Steve
>
> Follow Howell Davidson's Adventures at
> stevenRculver.com
>
>
>>________________________________
>>
> From: Rob Weir <[email protected]>
> To: [email protected]
> Sent: Thursday, January 17, 2013 2:35 PM
> Subject: Known Issues with AOO 3.4.1
>
> All testers should be sure they are aware of the known issues in AOO
> 3.4.1 as documented in the release notes:
>
> http://www.openoffice.org/development/releases/3.4.1.html#AOO3.4.1ReleaseNotes-KnownIssues
>
> I see quite a few defect reports from users that appear to be related
> to these issues.
>
> -Rob

Reply via email to